Agenda Item
b. Approval of Identity Automation RapidIdentity Lifecycle Management Renewal and Expansion (Not to Exceed $401,435) ~ Updated 5.8.2026
Summary: Presented by: Dr. Kermit Belcher, Chief Information Officer, Division of Information and Instructional Technology
Request: It is requested that the DeKalb County Board of Education approve the renewal and continued implementation of the RapidIdentity Lifecycle Management solution with Identity Automation, including core subscription services and Phase 2 and Phase 3 expansion services, for an amount not to exceed $401,435.
Why: The purpose of this agenda item is to support the Division of Information and Instructional Technology (DIIT) in maintaining and expanding a secure, scalable identity and access management platform that supports districtwide operations. RapidIdentity serves as the district’s enterprise solution for identity lifecycle management, enabling automated provisioning, access control, and system integration across critical instructional and business systems.
The current identity provisioning process previously relied on custom, staff-developed scripts, creating risks related to continuity, scalability, and security. The implementation of RapidIdentity has established a centralized, automated approach to identity management. Renewal of the core platform ensures continuity of these services, while Phases 2 and 3 expand functionality to further enhance automation, strengthen cybersecurity, and improve system integrations.
Details: Identity Automation’s RapidIdentity Lifecycle Management solution provides an automated, centralized approach to managing user identities throughout their lifecycle. The renewal maintains existing identity management services, while Phase 2 and Phase 3 introduce additional integrations, workflow automation, and enhanced authentication capabilities aligned with district operational and instructional needs.
The proposed renewal and expansion scope have been reviewed and validated through Statements of Work, supporting quotes, and stakeholder communications. All services, hours, and deliverables are aligned with documented expectations and support continued modernization of identity and access management across the district.
Key Services Provided:
Core Renewal - Identity Lifecycle Management Platform $227,225
The core renewal maintains districtwide identity lifecycle management through automated account provisioning and role-based access, with continued integration across systems such as MUNIS, Active Directory, Google, and Microsoft 365, while providing secure authentication, vendor support, and ongoing platform maintenance.
Phase 2 - Platform Expansion $58,000
Phase 2 expands RapidIdentity by establishing MUNIS as the authoritative source for staff data, integrating Incident IQ for workflow automation, and implementing nine (9) automated lifecycle workflows for onboarding, role changes, and offboarding. It also introduces a provisioning pipeline connecting Frontline, RapidIdentity, and Canvas, while enhancing automated provisioning and deprovisioning across district systems to reduce manual effort and improve accuracy.
Phase 3 - Authentication & Student Domain Enablement $116,210
Phase 3 enhances student identity services by implementing advanced authentication capabilities, including passwordless pictograph authentication, while enabling student domain provisioning across Active Directory, Google, and Microsoft 365. This phase also establishes Microsoft 365 federation with RapidIdentity to streamline access and authentication, ensuring alignment with district security standards and age-appropriate access controls.
Financial impact: General 100.1000.553200.00011.7600.9990.0308.070.0000
Contact: Dr. Kermit Belcher, Chief Information Officer, Division of Information and Instructional Technology, 678.676.1274
Effective: Upon Board Approval
Status: Pending Approval by the Office of Legal Affairs
Chronology- Identity Automation
The Division of Information and Instructional Technology (DIIT) implemented an automated
identity lifecycle management solution to strengthen cybersecurity and improve operational
efficiency across the DeKalb County School District. This initiative replaced the district’s former
homegrown identity provisioning process, which relied on custom scripting maintained by
individual staff members and presented risks related to continuity, scalability, and security.
Identity Automation’s RapidIdentity Lifecycle Management solution was deployed as a
centralized, enterprise-grade platform to manage the full lifecycle of student and staff user
accounts. The system automates identity creation, modification, and deactivation based on
real-time data from the district’s MUNIS ERP system, ensuring that access is consistently
aligned to employment or enrollment status while reducing manual intervention, improving data
accuracy, and minimizing the potential for human error.
Initial implementation activities included platform configuration, system integrations, and the
establishment of automated provisioning and deprovisioning workflows. Professional services
supported system deployment and knowledge transfer to district staff, establishing a stable and
sustainable operational environment. Since implementation, RapidIdentity has enabled timely
onboarding by providing immediate access to required systems for staff and students, while
automatically removing access when individuals leave the district or change roles, strengthening
compliance with data protection requirements and reducing the risk of unauthorized access.
Building on this foundation, the proposed renewal and expansion includes continued platform
support as well as Phase 2 and Phase 3 enhancements designed to further advance
automation, system integration, and secure authentication capabilities across the district.
Key Services Provided:
Core Renewal Identity Lifecycle Management Platform $227,225
● Continued access to the RapidIdentity platform supporting districtwide identity lifecycle
management
● Automated creation, modification, and deactivation of user accounts for staff and
students
● Role-based access control aligned to job functions, student enrollment, and
organizational structure
● Ongoing integration with core systems including MUNIS, Active Directory, Google,
Microsoft 365, and other enterprise platforms
● Maintenance of secure authentication and identity governance processes
● Vendor support, system updates, and platform maintenance to ensure reliability and
performance
Phase 2- Platform Expansion $58,000
● Transition of staff system of record from EnumDB to MUNIS to establish a single
authoritative source for employee data
● Integration with Incident IQ to support workflow intake and service request automation
● Design and deployment of nine (9) automated account lifecycle workflows supporting
onboarding, role changes, and offboarding
● Implementation of a provisioning pipeline integrating Frontline, RapidIdentity, and
Canvas to support instructional system access
● Expansion of automated identity provisioning and deprovisioning across district systems
to reduce manual intervention and improve accuracy
Phase 3- Authentication & Student Domain Enablement $116,210
● Implementation of enhanced authentication capabilities, including passwordless
pictograph authentication for students
● Configuration and deployment of student domain provisioning across Active Directory,
Google, and Microsoft 365 environments
● Establishment of Microsoft 365 student domain federation with RapidIdentity to
streamline access and authentication
● Alignment of student identity services with district security standards and
age-appropriate access controls
Collectively, the renewal and expansion of RapidIdentity will strengthen the district’s
cybersecurity posture through centralized identity governance, real-time system integration, and
automated lifecycle management. These efforts reduce reliance on manual processes and
custom scripting, improve operational efficiency, and provide a scalable, enterprise-level
framework to support ongoing district growth and technology initiatives.
This initiative supports the district’s long-term technology strategy by enhancing security,
improving operational reliability, and establishing a sustainable identity and access management
environment aligned with district standards.
Procurement:
In accordance with Board of Education Purchasing Policy DJE III.D.3.d., purchases may be
made through contracts formally solicited and obtained through inter-governmental and
educational cooperatives, alliances, and consortiums to achieve cost savings and administrative
efficiencies. Therefore, this purchase will utilize General Services Administration (GSA) Contract
#47QTCA19D003G.
Financial Impact
Year Cost
2025-26 $291,225
2026-27 $401,435 requested
(includes expansion)